Mozilla had to replace a Firefox signing key after it ended up on GitHub
Mozilla has replaced one of the signing keys used for Firefox and Thunderbird after discovering that an unencrypted copy had been committed to a private GitHub repository.
It sounds worse...
Aug 12, 2026 2 Min Read